STIGQter: STIG Summary: HPE Aruba Networking AOS NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 22 Oct 2024:

AOS must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.

DISA Rule

SV-266975r1039946_rule

Vulnerability Number

V-266975

Group Title

SRG-APP-000148-NDM-000346

Rule Version

ARBA-ND-000346

Severity

CAT II

CCI(s)

• CCI-001358 - Establish privileged user accounts in accordance with a role-based access scheme; or an attribute-based access scheme.

Weight

10

Fix Recommendation

Configure AOS with the following commands:
configure terminal
no mgmt-user <username>
for any existing users other than "admin".
write memory

Check Contents

Verify the AOS configuration with the following command:
show mgmt-user

If any user other than "admin" is present, this is a finding.

Vulnerability Number

V-266975

Documentable

False

Rule Version

ARBA-ND-000346

Severity Override Guidance

Verify the AOS configuration with the following command:
show mgmt-user

If any user other than "admin" is present, this is a finding.

Check Content Reference

M

Target Key

5648